1 class base_configuration (
10 service { "systemd-networkd.socket":
14 service { "systemd-networkd":
19 unless empty($hostname) {
20 class { 'systemd::hostname':
25 user { "${username}:${userid}":
31 notify => Exec["remove_password"]
34 exec { "remove_password":
35 command => "/usr/bin/chage -d 0 $username && /usr/bin/passwd -d $username",
39 ssh_authorized_key { $username:
40 name => "immae@immae.eu",
43 key => "AAAAB3NzaC1yc2EAAAADAQABAAABAQDi5PgLBwMRyRwzJPnSgUyRAuB9AAxMijsw1pR/t/wmxQne1O5fIPOleHx+D8dyZbwm+XkzlcJpgT0Qy3qC9J8BPhshJvO/tA/8CI/oS/FE0uWsyACH1DMO2dk4gRRZGSE9IuzDMRPlnfZ3n0tdsPzzv3GH4It/oPIgsvkTowKztGLQ7Xmjr5BxzAhXcIQymqA0U3XWHSdWvnSRDaOFG0PDoVMS85IdwlviVKLnV5Sstb4NC/P28LFfgvW8DO/XrOqujgDomqTmR41dK/AyrGGOb2cQUMO4l8Oa+74aOyKaB61rr/rJkr+wCbEttkTvgFa6zZygSk3edfiWE2rgn4+v"
47 config_file_replace => false
52 content => "%wheel ALL=(ALL) ALL"
55 class { 'ssh::server':
56 storeconfigs_enabled => false,
59 'X11Forwarding' => 'yes',
61 'ChallengeResponseAuthentication' => 'no',
62 'Subsystem' => 'sftp /usr/lib/openssh/sftp-server',
66 ensure_packages('ruby-shadow')
71 file { '/etc/pacman.d/mirrorlist':
73 path => "/etc/pacman.d/mirrorlist",
74 source => 'puppet:///modules/base_configuration/mirrorlist',
85 pacman::repo { 'multilib':
87 include => '/etc/pacman.d/mirrorlist'
90 class { '::logrotate':
91 manage_cron_daily => false,
93 rotate_every => 'week',
97 olddir => '/var/log/old',
98 tabooext => "+ .pacorig .pacnew .pacsave",
102 logrotate::rule { 'wtmp':
103 path => '/var/log/wtmp',
104 rotate_every => 'month',
106 create_mode => '0664',
107 create_owner => 'root',
108 create_group => 'utmp',
112 logrotate::rule { 'btmp':
113 path => '/var/log/btmp',
115 rotate_every => 'month',
117 create_mode => '0600',
118 create_owner => 'root',
119 create_group => 'utmp',
123 ensure_packages(["whois"], { 'install_options' => '--asdeps' })
125 logtarget => 'SYSLOG',
128 fail2ban::jail { 'sshd':
129 backend => 'systemd',